StepSecurity Logo
StepSecurity
LoginStart free
codespell-project/actions-codespell

codespell-project/actions-codespell

GitHubGitHub Repository

87 stars

Docker

Docker Action

Maintained action available

Score updated 6 days ago

GitHub Actions security score

codespell-project/actions-codespell

Score

5/10

License

MIT License

Maintained

0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0

Vulnerabilities

0 existing vulnerabilities detected

Docker vulnerabilities

python:3.13-alpine

(2 existing vulnerabilities detected)

Branch protection

branch protection is not maximal on development and all release branches

Manual code review

-

Secure publishing

-

Signed commits

-

Automated security tools

-

Popular

Used by 956 open-source projects

Security Policy

security policy file not detected

Networking Behavior of codespell-project/actions-codespell

This GitHub Action often makes outbound network calls to these destinations, as gathered from public workflows using the Harden-Runner GitHub Action. Harden-Runner offers network egress filtering and runtime security for both GitHub-hosted and self-hosted runners.

Popular DestinationUnknown Destination
Network DestinationOwner
global.endpoint.security.microsoft.comMicrosoftMicrosoft